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(54) A remote control transmitter 

(57) A remote control group transmitter (1 ) stores an 
encryption key uniquely associated with the remote con- 
trol group. The transmitter decrypts an encrypted group- 
specific site code in a teaching radiation signal. The site 
code is then used to generate the encryption key for op- 
eration of a shared group function. The transmitter, in 
use, encrypts the discrimination value and the hopping 



index with the encryption key. The serial number is 
transmitted, but is not encrypted A receiver of the group 
decrypts the encrypted code to determine the discrimi- 
nation value and hopping index. The receiver validates 
a new transmitter by receiving and decrypting two en- 
crypted codes in quick succession and checking that the 
serial numbers are the same and the second hopping 
index is valid with reference to the first hopping index. 



CM 
< 

00 

in 

00 



Q. 

UJ 



Receive 
antenna 

V 



Receiver 
circuit 



GndLTT 4 
+Vreg 

9 



dock 



LED 
Indication 



Microprocessor 
3 



,10 



2 



Memory 



Data 



+Vbat 

X 



Oscillator 



Gnd 



*L7 



+Vreg 











< 


Switch 


Switch 


Switch 


Switch 



Gnd[ 
7 

j 



Transmitter 
antenna 

v A 



+Vbat 



Ii T 



Batteries 



Regulator 
Gnd | Gnd | 



Fig. l 



Printed by Jouve, 75001 PARIS (FR) 



EP 1 085 481 A2 



Description 

[0001] The invention relates to a transmitter for a re- 
mote controi group for a shared function such as open- 
ing a garage door. It also relates to a receiver for such 
a group and to a group of a receiver and a plurality of 
transmitters. 

[0002] Our prior European Patent No. EP0651119B1 
describes a transmitter having a. capability of learning a 
code so that it can be used in a remote control group. 
An embedded instruction allows versatility as to how 
learning takes place. Also, there is automatic "listening" 
every time the transmit button is pressed. 
[0003] Such features in a transmitter are very helpful 
for learning. However, there remains a need for improv- 
ing security in the transmitter-receiver link. One ap- 
proach to achieving improved security is to encrypt us- 
ing an encryption key. However, this means that the in- 
stallation engineer needs to access the receiver to pro- 
gram it to allow introduction of each new transmitter of 
the group. This is time-consuming and expensive. 
[0004] It is therefore an object of the invention to pro- 
vide: 

(a) improved security in the transmitter-receiver 
link, with 

(b) automatic introduction of a new transmitter to the 
receiver with out the need for installation engineer 
to be involved. 



[001 1 ] In one embodiment, the transmitter comprises 
means for receiving the site code in an encrypted teach- 
ing radiation signal and for decrypting said signal to de- 
termine the site code using a teaching decryption key. 
s [001 2] In one embodiment, the transmitter comprises 
means for storing a transmitter-specific serial number 
and for transmitting the serial number together with the 
encrypted code. 

[001 3] According to another aspect, the invention pro- 
10 vides a remote control group master transmitter for 
teaching a transmitter as described above, the master 
transmitter comprising a memory, a processor, and a 
transmit device, wherein the processor comprises: 

is means for storing a site code which is unique to the 
remote control group, 

means for encrypting the site code with a teaching 
encryption key for teaching; and 

20 

means for directing transmission of the encrypted 
site code in a teaching radiation signal. 

[001 4] According to another aspect, the invention pro- 
25 vides a receiver for a remote control group having a 
transmitter as described above, the receiver comprising 
a memory, an interface to a shared function, and a proc- 
essor comprising means for controlling the shared func- 
tion via said interface, wherein the processor further 
30 comprises:- 



[0005] According to the invention, there is provided a 
remote control group transmitter comprising a transmit- 
ting device, a user transmit button, a processor, and a 
memory, characterised in that, 

the processor comprises means for:- 

encrypting a valid code with an encryption key 
uniquely associated with the remote control group 
to generate an encrypted code, and 

directing transmission of the encrypted code. 

[0006] In one embodiment, the valid code is variable 
according to pre-set criteria. 

[0007] In one embodiment, the valid code comprises 
a hopping index. 

[0008] In another embodiment, the valid code com- 
prises a combination of a fixed discrimination value 
known to the receiver and a hopping index. 
[0009] In one embodiment, the transmitter comprises 
means for learning the encryption key in response to a 
teaching radiation signal. 

[001 0] In one embodiment, the transmitter comprises 
means for generating the encryption key by processing 
a manufacturer-set key with a site code which is unique 
to the group. 



means for storing a decryption key uniquely asso- 
ciated with the remote control group, 

35 means for decrypting a received encrypted code to 
generate a decrypted code, and 

means for determining if the decrypted code is valid. 

40 [0015] In one embodiment, the processor comprises 
means for: 

identifying a transmitter serial number in a received 
transmission and determining if it is valid, 

45 

identifying a hopping index and a discrimination val- 
ue in the decrypted code, and 

determining if the discrimination value and the hop- 
so ping index are valid. 

[0016] In another embodiment, the processor com- 
prises means for determining if the serial number is valid 
by: 

55 

comparing the serial number with a stored list of val- 
id serial numbers, 
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determining that the serial number is valid if it is the 
same as a stored valid serial number or if it subse- 
quently receives a fresh encrypted code containing 
the same serial number and a valid hopping index. 

[0017] The invention will be more clearly understood 
from the following description of some embodiments 
thereof, given by way of example only with reference to 
the accompanying drawings in which Fig. 1 is a sche- 
matic diagram of a remote control group transmitter of 
the invention. 

[0018] Referring to Fig. 1 , remote control group trans- 
mitter 1 comprises: 

2: a microprocessor, 

3: a memory having a capacity for four site (group) 
codes, four serial numbers, four hopping indexes, 
four encryption keys, and four discrimination val- 
ues, 

4: a radiation receiver connected to the microproc- 
essor 2, 

5: a transmitter antenna, connected to an oscillator 

circuit 6, 

7: four switches, 

8: a battery pack, and 

9: a regulator providing + Vreg for all of the circuit. 

[001 9] The memory capacity is adequate for four sets 
of data, as described above. This allows the transmitter 
1 to be used for up to four different remote control 
groups. However, for clarity, operation for only one 
group is described below. 

[0020] The microprocessor 2 is programmed to rec- 
ognise a switch 7 depression as a transmit instruction. 
Simultaneous depression of two or more switches in 
various pre-set configurations are interpreted as user in- 
structions for auxiliary functions such as a teach mode 
or randomisation of codes. Programming of the micro- 
processor 2 at manufacture determines whether the 
transmitter is a master or a slave. Slaves do not have a 
teach mode. The transmitter 1 is a slave. 
[0021] The transmitter 1 is part of a remote control 
group also comprising a receiver and a master transmit- 
ter. The latter is used for teaching both the receiver and 
the transmitters 1 . It has the same hardware configura- 
tion as the transmitter 1 , but is additionally programmed 
with a teach mode. 

[0022] The remote control group is given a unique site 
code by the installer and the master transmitter teaches 
the site code to the receiver and to the transmitters 1 . 
This effectively empowers the installer to set the manner 
in which the remote control group operates from a se- 
curity viewpoint. Each master transmitter is pre-pro- 
grammed at manufacture with a unique (to it) site code. 
Therefore the installer may use the pre-programmed 
site code of a master transmitter as that of the group. 
Alternatively, he may change it by randomising the pre- 
set value. 



[0023] Each new transmitter stores the following after 
manufacture: 

a 24-bit serial number (pre-programmed at manu- 
5 facture) which is unique to the new transmitter, 

an initial 20-bit hopping index which will subse- 
quently be incremented every time the new trans- 
mitter is used, 

a manufacturer-set encryption key, and 

a decryption key for decrypting a site code in a 
teaching session. 

[0024] The master transmitter teaches the site code 
to a (slave) transmitter 1 using a teaching encryption 
key. The transmitter 1 decrypts it using a teaching de- 
cryption key. After decryption, the transmitter 1 uses the 
site code to generate the encryption key for use in send- 
ing signals to the receiver for control of the shared group 
function. After it is used to generate the encryption key, 
it is not necessarily stored as it is not required again. 
The encryption key is 64 bits long. The master transmit- 
ter also teaches a discrimination value to the transmitter 
1 . This is an agreed value that enables the receiver to 
determine that it has correctly decrypted the transmis- 
sion. It could, for example, be part of the site code or 
the serial number or any other agreed number. 
[0025] The encryption key could alternatively be gen- 
erated by only the master transmitter and taught to the 
receiver and the transmitters 1. However this suffers 
form the disadvantage of involving transmission of the 
encryption key. 

[0026] When the user is given the new transmitter, he 
or she can immediately use it without the need for an 
installation engineer to access the receiver. There are 
two stages to the introduction of the new transmitter to 
the receiver by the user as follows. 

(a) Initial Acceptance 

[0027] The user presses the "transmit" button. The 
microcontroller encrypts the initial hopping index and 
the discrimination value with the encryption key to pro- 
vide a valid encrypted code. The (unencrypted) serial 
number and the encrypted code are transmitted, and are 
received by the receiver. The receiver decrypts the code 
using its stored decryption key to determine the discrim- 
ination value and the initial hopping index. The receiver 
then checks the (decrypted) discrimination value and, if 
valid, it stores the serial number and the initial hopping 
index. 

(b) Acceptance and Activation 

[0028] The user presses the "transmit" button again 
and the transmitter increments the hopping index and 
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directing transmission of the encrypted code. 

2. A remote control group transmitter as claimed in 
claim 1 , wherein the valid code is variable according 

5 to pre-set criteria. 

3. A remote control group transmitter as claimed in 
claim 2, wherein the valid code comprises a hop- 
ping index. 

w 

4. A remote control group transmitter as claimed in 
claim 2 or 3, wherein the valid code comprises a 
combination of a fixed discrimination value known 
to the receiver and a hopping index. 

15 

5. A remote control group transmitter as claimed in 
any preceding claim, wherein the transmitter com- 
prises means for learning the encryption key in re- 
sponse to a teaching radiation signal. 

20 

6. A remote control transmitter as claimed in claim 5, 
wherein the transmitter comprises means for gen- 
erating the encryption key by processing a manu- 
facturer-set key with a site code which is unique to 

25 the group. 

7. A remote control transmitter as claimed in claim 6, 
wherein the transmitter comprises means for re- 
ceiving the site code in an encrypted teaching radi- 

30 ation signal and for decrypting said signal to deter- 
mine the site code using a teaching decryption key. 

8. A remote control transmitter as claimed in any pre- 
ceding claim, wherein the transmitter comprises 

35 means for storing a transmitter-specific serial 
number and for transmitting the serial number to- 
gether with the encrypted code. 

9. A remote control group master transmitter for teach- 
40 ing a transmitter as claimed in any preceding claim, 

the master transmitter comprising a memory, a 
processor, and a transmit device, wherein the proc- 
essor comprises: 



then encrypts the discrimination value and the incre- 
mented hopping index to provide a new encrypted code. 
Although there may only be a one-digit difference be- 
tween this incremented hopping index and the initial 
hopping index, the encrypted code is very different due 
to the complex nature of the encryption. The receiver 
decrypts the new encrypted code to determine the dis- 
crimination value and the incremented hopping index, 
and reads the serial number. If the following criteria are 
met the receiver activates the shared group function (e. 
g. opens a gate) and stores the incremented hopping 
index: 

the serial number is the same as the first one, 
the decrypted incremented hopping index matches 
the hopping criterion (greater than the first one), and 
the discrimination value is correct. 

[0029] Thereafter, the user only needs to press the 
transmit button once to activate the shared group func- 
tion. This two-stage acceptance process prevents a 
spuriously "acceptable" noise signal from being able to 
activate the group function. 

[0030] It will be appreciated that there is no need for 
the installation engineer to program the receiver to in- 
troduce (validate) a new transmitter. However, this is not 
achieved at the expense of reduced security as there is 
comprehensive encryption. Thus, for example, an in- 
staller organisation may teach a new transmitter and 
send it to the user in the post, with considerable savings 
in time and money. Another aspect contributing to secu- 
rity is the fact that "breaking" of encryption in one group 
will have no effect on security at another group having 
the same or another manufacturer's equipment. This is 
because the encryption key is unique to each group. Al- 
so, unauthorised copying of the transmitted encrypted 
code is of no benefit to a thief as it changes from one 
transmission to the next in an unpredictable manner due 
to encryption of the combined discrimination value and 
incrementing hopping index. It is envisaged that where 
particularly strong security is required (such as at a 
bank) the user may safely store the (single) master 
transmitter thus preventing any unauthorised teaching 
of new transmitters. 

[0031 ] The invention is not limited to the embodiments 
described but may be varied in construction and detail. 



Claims 

1. A remote control group transmitter comprising a 
transmitting device, a user transmit button, a proc- 
essor, and a memory, characterised in that, 
the processor comprises means for:- 

encrypting a valid code with an encryption key 
uniquely associated with the remote control 
group to generate an encrypted code, and 



« means for storing a site code which is unique 

to the remote control group, 

means for encrypting the site code with a teach- 
ing encryption key for teaching; and 

50 

means for directing transmission of the encrypt- 
ed site code in a teaching radiation signal. 

1 0. A receiver for a remote control group having a trans- 
55 mitter as claimed in any of claims 1 to 8, the receiver 
comprising a memory, an interface to a shared func- 
tion, and a processor comprising means for control- 
ling the shared function via said interface, wherein 
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the processor further comprises:- 

means for storing a decryption key uniquely as- 
sociated with the remote control group, 

5 

means for decrypting a received encrypted 
code to generate a decrypted code, and 

means for determining if the decrypted code is 
valid. io 

11 . A receiver as claimed in claim 1 0, wherein the proc- 
essor comprises means for: 

identifying a transmitter serial number in a re- '5 
ceived transmission and determining if it is val- 
id, 

identifying a hopping index and a discrimination 
value in the decrypted code, and 20 

determining if the discrimination value and the 
hopping index are valid. 

12. A receiver as claimed in claim 11 , wherein the proc- 25 
essor comprises means for determining if the serial 
number is valid by: 

comparing the serial number with a stored list 
of valid serial numbers, 30 

determining that the serial number is valid if it 
is the same as a stored valid serial number or 
if it subsequently receives a fresh encrypted 
code containing the same serial number and a 35 
valid hopping index. 

13. A remote control group comprising a transmitter as 
claimed in any of claims 1 to 8 and a receiver as 
claimed in any of claims 1 0 to 1 2. *o 

14. A remote control group as claimed in claim 13 fur- 
ther comprising a master transmitter as claimed in 
claim 9. 
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